9b075c635b40fb2f6d564e3a1db232c529c7466c8eee158e906bfa3a15f45be9

Sharing

Copy URL Twitter E-mail

General

Target

9b075c635b40fb2f6d564e3a1db232c529c7466c8eee158e906bfa3a15f45be9
Size

199KB
MD5

0722886561a4d05dd16630cd79ce8034
SHA1

7b0ffcecf037c56c6b9f7fd826f5b14015d4ae42
SHA256

9b075c635b40fb2f6d564e3a1db232c529c7466c8eee158e906bfa3a15f45be9
SHA512

7fa1c42bf20ea7a8a4bf612d6d0cff0a3f3ad82d6437bf97e86c579bfa176e66bdf4737c84e3f8c2f376f6f355ed3015f666b85965559efb9fffcc4261dae3f4
SSDEEP

3072:gaumqLIex6AmmKCfVfoexgjBXG0nNAFjsqDYp4WCZ8K3bHR8g+y/EvN:9fAloYgjBW0Ajsq/84FXl6N

Score

N/A

Malware Config

Signatures

Files

9b075c635b40fb2f6d564e3a1db232c529c7466c8eee158e906bfa3a15f45be9
.exe windows x86

4a23e37a9107a074bb7e3c92a09163e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oinfo11.ocx

GetOfficeData
DeleteOfficeData

kernel32

GetCommandLineA
GetModuleHandleA
LoadLibraryExA
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
SetEvent
IsDBCSLeadByte
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GetModuleFileNameA
lstrcpynA
CreateEventA
CreateThread
Sleep
WaitForSingleObject
CloseHandle
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapSize
HeapReAlloc
HeapDestroy
GetProcessHeap
HeapAlloc
HeapFree
VirtualQuery
GetSystemInfo
VirtualAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualProtect
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
SetLastError
GetModuleHandleW
GetProcAddress
GetFileAttributesW
LoadLibraryW
GetModuleFileNameW
OutputDebugStringA
LocalAlloc
LocalFree
GlobalLock
GlobalReAlloc
GlobalUnlock
GlobalHandle
GlobalAlloc
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
GlobalFree
LoadLibraryA
lstrcmpW
lstrcatA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpA
GlobalFlags
lstrcpyA
GetCPInfo
GetOEMCP
GetCurrentProcess

user32

ClientToScreen
DestroyMenu
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
PostQuitMessage
RegisterWindowMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetWindowTextA
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
GetClassInfoA
CreateWindowExA
GetClassInfoExA
RegisterClassA
SetForegroundWindow
GetClientRect
GetMenu
PostMessageA
AdjustWindowRectEx
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
CopyRect
SetWindowLongA
SetWindowPos
PtInRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
SetMenuItemBitmaps
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
SetWindowsHookExA
CallNextHookEx
UnregisterClassA
CharUpperA
GetKeyState
PeekMessageA
ValidateRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetWindowTextA
DispatchMessageA
TranslateMessage
GetMessageA
PostThreadMessageA
CharNextA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
MessageBoxA
UnhookWindowsHookEx
SendMessageA

advapi32

RegOpenKeyExW
RegEnumKeyExA
RegQueryInfoKeyA
RegQueryValueExW
RegisterEventSourceW
ReportEventW
DeregisterEventSource
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

shlwapi

PathFindExtensionA

ole32

StringFromGUID2
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoRegisterClassObject
CoRevokeClassObject
CoCreateInstance
CoInitialize

oleaut32

VariantInit
VariantChangeType
SysStringLen
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
VarUdateFromDate
VarBstrFromDate
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
VariantClear
SysFreeString
SysAllocStringLen

msvcrt

memcpy
malloc
_controlfp
??1type_info@@UAE@XZ
ctime
mktime
gmtime
localtime
time
_vsnwprintf
_onexit
__dllonexit
__set_app_type
__p__fmode
free
_except_handler3
_vsnprintf
memmove
_wcsicmp
strftime
realloc
_CxxThrowException
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__CxxFrameHandler
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_mbctype
_expand
_mbscmp
_msize
swprintf
memset

oleacc

LresultFromObject
CreateStdAccessibleObject

gdi32

GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
DeleteObject
ExtTextOutA
SaveDC
RestoreDC
SetMapMode
PtVisible
RectVisible
TextOutA
Escape
GetDeviceCaps

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

Exports

Exports

_ctime64
_gmtime64
_localtime64
_mktime64
_resetstkoflw
_scprintf
_scwprintf
_time64
_vscprintf
_vscwprintf

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4a23e37a9107a074bb7e3c92a09163e7

Headers

DLL Characteristics

File Characteristics

Imports

oinfo11.ocx

kernel32

user32

advapi32

shlwapi

ole32

oleaut32

msvcrt

oleacc

gdi32

winspool.drv

Exports

Exports

Sections

.text Size: 106KB - Virtual size: 106KB

.data Size: 2KB - Virtual size: 10KB

.cdata Size: 512B - Virtual size: 4B

.rsrc Size: 80KB - Virtual size: 80KB

.text
Size: 106KB - Virtual size: 106KB

.data
Size: 2KB - Virtual size: 10KB

.cdata
Size: 512B - Virtual size: 4B

.rsrc
Size: 80KB - Virtual size: 80KB